The Typographical Fingerprint
Google Chrome supports a highly specific Local Font Access API. This API allows web applications (like browser-based graphic design tools or word processors) to bypass standard web fonts and scan your operating system for every single custom font you have installed locally on your hard drive. While useful for a design tool, this is a massive privacy vulnerability known as “Font Fingerprinting.” Because every user has a slightly different, unique combination of installed fonts, malicious websites use this exact list as a cryptographic hash to silently track you across the internet, even if you delete your cookies. You must paralyze this API.
How to Block Local Fonts Access Globally
You can permanently sever the browser’s ability to scan your operating system’s font folder via Chrome’s Site Settings.
- Open the Google Chrome desktop browser.
- Click the three vertical dots (â‹®) in the top right corner and select Settings.
- In the left-hand sidebar, click on Privacy and security.
- In the main window, click on Site settings.
- Scroll down to the “Permissions” heading and click to expand Additional permissions.
- Click on Local fonts.
- Under the “Default behavior” heading, select the radio button for “Don’t allow sites to use local fonts.”
System Isolation
The change takes effect instantly. Google Chrome will completely sever its internal connection to your operating system’s font rendering engine. The browser is now permanently blind to any custom typography you have installed. If an advertising network or tracking script attempts to execute the API to generate a list of your fonts, the request will instantly auto-reject in the background, returning a generic, standard list. This guarantees that your unique font configuration can never be weaponized to track your identity online.